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Abstract of JP 10254840 (A) 

PROBLEM TO BE SOLVED: To ensure 
that a mobile code is not processed illicitly 
in executing the mobile code by checking 
an integer value obtained by inputting the 
code of an engine to one direction function 
and verifying that the engine code is not 
rewritten. SOLUTION: A verification 
substitute agent 9 which substitutively 
verifies the justness of the engine 4 
operates on the server-side engine 4. The 
verification substitute agent 9 obtains the 
integer value depending on the engine 
code by an engine code read part 1 1 and a 
one direction function calculation part 13, 
which are out of the engine, through an 
interface part 10 in the engine 4 in 
accordance with the request message of a 
client-side verification agent and returns the 
integer value to the verification agent of the 
client.; When the engine code is rewritten 
for realizing the illicit processing, the integer 
value which one direction function outputs 
differs from that of the original engine code. 
Thus, rewriting can be detected. 
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1. This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1]A mode BAIRU code execution system comprising: 

Execution engine with a mechanism in which read-out and rewriting of information without 
necessity in a MOBA yl code are forbidden when executing a MOBA yl code. 
A device which verifies that an engine code is not rewritten by investigating an integral value 
acquired by inputting a code of the engine into a one-way function. 

[Claim 2]In the MOBA yl code execution system according to claim 1, add read-out pattern 
storage to an engine code read section, and all the engine codes are not read to it, A MOBA yl 
code execution system reading only data of an address specified by a read-out pattern. 
[Claim 3]In the MOBA yl code execution system according to claim 1, on an engine of a client 
side, A MOBA yl code execution system characterized by verifying the justification of an engine 
of the partner point before transmitting a MOBA yl code towards an engine with which an agent 
who verifies the justification of an engine by the side of a server is operated, and the server to 
be used operates. 

[Claim 4] A MOBA yl code execution system characterized by performing a mutual verification, 
an electronic signature of a message, and encryption in the MOBA yl code execution system 
according to claim 3 at the time of message switching for engine verification by the side of a 
server. 

[Claim 5]In the MOBA yl code execution system according to claim 1 , about composition 
contents of a MOBA yi code which transmits, as an execution code, As data which decryption of 
a code after verification of engine justification and verification etc. which were enciphered, and a 
code of an agent for engine verification of the server side which executes a decrypted code 
were stored, and was brought, A MOBA yl code execution system, wherein an execution code 
and data of enciphered original are stored, and the encryption is given so that an integral value 
acquired by inputting an engine code by the side of a server into a one-way function can be 
decrypted as a key. 

[Claim 6]In the MOBA yl code execution system according to claim 5, about encryption with an 
original execution code and its data. In adding for every server at the time of encryption of a 
peculiar key and using a public key for encryption, A MOBA yl code execution system performing 
encryption using public key encryption of a server which needs to use the data in the middle of a 
client when newly using as bringing data data obtained from a server. 
[Claim 7]An engine self-verification device is added in the MOBA yl code execution system 
according to claim 1, It is acquiring periodically an integral value for which it depended on an 
engine code by an engine code read section and a one-way function calculation part besides an 
engine during the time of starting of an engine of a server, and operation, and performing 
comparison with a right value, A MOBA yl code execution system performing self-verification of 
rewriting of an engine code. 
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* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention]In information processing with the multi-agent system according 
especially to a MOBA yl cord about the security art of the information processing in the 
environment where the computer of a large number which exist this invention dispersedly was 
connected in the network, It is related with the MOBA yl cord executive system it is guaranteed 
that does not perform unjust processing to the MOBA yl code at the time of execution of a 
MOBA yl cord. 

[0002] By development of a personal computer, and development of computer network art Make 
a mainframe into a main host, a terminal hangs down from it, and each personal computer 
workstation is made into a front end from the centralized processing method which depends for 
all the information processing on a main host, The client server method of choosing suitably the 
database server using a computer with the calculation server and the large-scale memory 
storage using two or more supercomputers installed on the network, and processing information 
in the purpose is becoming in use. 

[0003]The frame of the used computer or communication media was overcome by the open 
standard as technology trends of a worldwide computer network, and the Internet which is the 
network-of-network formed by connection of each computer network is expanded quickly. The 
motion is expanded also from the field of not only the field of a scale but use from a specialist to 
the general public, and the Internet exceeds the existing frameworks, such as a company and a 
country, and it is continuing growing as a computer network with worldwide breadth. The intranet 
which limited the use area to the specific in-house is also spreading these days, inheriting the 
pliability and convenience of the Internet. 

[0004]Along with the expansion in the scale and field-of-the-invention both sides of such 
Internet intranet, to all the things which exist on a network from what of the range to which the 
relation between client servers was also restricted is [ being exclusive and ] fixed. To sometimes 
respond and to evolve into what can be connected and used freely came to be desired. 
Therefore, an interface which is not bound to an available plat form is needed. To provide 
advanced service in which the user who uses unifies and treats the server of the kind from 
which two or more networks differ with a simple interface as he spreads from the limited 
specialist to the general public came to be needed. In order to fill those requests, the multi- 
agent system in which the agent of the side to access realizes advanced information processing 
by exchange of a message with the agent who manages each server attracts attention. 
[0005]The correspondence to the case where it has not always connected with a network by the 
spread of personal digital assistants, In order to send in an agent not from message switching 
with an agent ready-made [ by the side of a server ] but from here and to perform advanced and 
flexible information processing, The MOBA yl cord (MOBA yl agent) method that the agent itself 
moves in a network top is thought as important as a part of multi-agent system. 
[0006] 

[Description of the Prior Art]A multi-agent's system is implemented as follows. That is, the 
engines (shell, an interpreter, etc.) which manage at least one, generation and disappearance of 
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an agent, and communication between agents are placed on each computer. And substance, such 
as a process and a thread, is given so that each agent may function in mutually-independent and 
may exchange messages mutually. Each agent's substance may be a process with independent 
case where it exists in an engine process and engine. The message switching with the agent who 
exists on another computer on a network, It is indirectly carried out directly among agents by 
considering an engine as agency via an engine using TCP (data link control protocol) or UDP 
(User Datagram Protocol). 

[0007]In a MOBA yl cord method, the cord of the agent who should perform is transmitted as a 
message from one computer, and the cord is performed by the received computer. Therefore, 
implementation which generally carries out immediate execution of the sent cord on the system 
of a computer is not taken, but implementation used as the virtual machine for performing the 
interpreter or byte cord for performing the cord for an engine is taken. It does so because [ of 
security reservation of the abstraction for considering it as a multiplatform, and the system of 
the computer described later ]. 

[0008]In the Internet which is the environment which the computer is distributing on a network, 
and a network which has worldwide breadth especially, As the pliability and convenience being 
inside-out, who accesses what by what kind of means from where when, it succeeds in what, and 
there is possibility (danger) about the influence of the result coming out how infinitely. Therefore, 
it is necessary to restrict access by bad faith or inattention. For the realization, installing the fire 
wall which used the computer for access controls in the entrance of the network of the regular 
range, and adding restriction to the network of the partner point which communicates, and the 
kind of communications protocol is performed on the network level. 

[0009]In the level of a multi-agent's engine. In order to prevent adding restriction to the range, 
quantity, and occupation time of the resource which can be accessed for restriction of the open 
range, and impossible prevention of the system by superfluous occupancy of operation, and 
unlawful access to systems, such as computer virus, Always carrying out indirect access to the 
system of a computer, or performing code verification before execution of a MOBA yl cord etc. 
is performed. 

[0010]There is no telling along what kind of course the Internet generally passes on the 
structure, but there are tapping and an alteration of the communication data on a course, and a 
possibility that a holder in bad faith will impersonate an original partner and danger. In order to 
prevent it, art, such as encryption of a communication content and an electronic signature for 
guaranteeing attestation and not being altered of the partner adapting encoding technology, is 
used. Specifically, PEM (Privacy-Enhanced Mail), PGP (Pretty Good Privacy), etc. using Kerberos 
using a secret key cryptosystem, or a public key and a secret key cryptosystem exist. 
[0011] 

[Problem(s) to be Solved by the Invention]The protection as an object of intellectual-property- 
rights reservation is needed as MOBA yl cord itself has advanced features. Usage which 
performs a drawer, processing, etc. of data one after another may also be performed by sending 
a MOBA yl cord to a network in the form accompanied by data, and carrying out two or more 
service servers and message switching on a network. In that case, since the service server on a 
network cannot always trust it, the necessity of keeping secret the data which needed to 
prevent read-out of unnecessary data to data processing, and was obtained from a certain 
service server from other service servers is also possible. 

[0012]However, the conventional security art aims at protecting data and the system in a 
network from external unlawful access etc., and the protection about the MOBA yl cord which 
transmits is not enough. Although the server which provides service was kept as one of the 
agents and there was also an engine prevented from peeping into the contents of the MOBA yl 
cord unjustly from a server, a means to verify whether the engine really has the limiting function 
did not exist 
[0013] 

[Means for Solving the Problem]In a MOBA yl cord executive system of this invention. When a 
system by the side of a server performs a MOBA yl cord, it comprises an engine with a function 
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a bringing data part, and a device which executes verification with the just engine by proxy. 
Verification of whether an engine function to forbid unjust read-out rewriting of data in a MOBA 
yl code is just is performed by checking a code of the engine. 

[0014]An engine has in an inside a controlling device which performs an access control of 
resources, such as a memory used while each agent performs, so that other agents cannot 
access a field which each agent has not permitted clearly. 

[001 5] Drawing 1 is a principle lineblock diagram of this invention. In drawing 1 , 1 is a vicarious 
execution device of verification of the justification of unjust read-out and an engine with a 
rewriting prohibition function by this invention, and an engine according [ 2 ] to this invention. 3 
is a client side system which requires service. 4 is server side engine in which unjust read-out 
and the engine 1 with a rewriting prohibition function are realized. 5 is resources, such as a 
memory which it has in the server side engine 4. An access management device with which 6 
manages access to the resource 5, and 7 thru/or 8 is the agents who are operating using the 
resource 5, and server agent, 8, and 8' is other agents 7. 9 thru/or 1 3 constitute the vicarious 
execution device 2 of verification of engine justification, and 9 is a verification vicarious 
execution agent who operates on the server side engine 4. 10 is an interface part in an engine. 
11 is an engine cord read section which exists on the primary storage besides an engine, or a 
secondary storage, Read-out pattern storage in which a pattern which specifies an address of 
data which 12 reads from an engine cord is stored, and 13 are one-way function calculation 
parts which consider data of an engine cord read from the engine cord read section 11 as an 
input, carry out functional calculus, and output a fixed-length integral value. 
[001 6]The client side system 3 has the following two kinds of composition. The agent to whom 
one of them verifies the justification of an engine by the side of a server operates on an engine 
of a client side. As for other one, an original execution code and bringing data which were 
enciphered are in the MOBA yl cord itself, and there is a cord of an agent for performing 
decryption and execution of a cord of verification of engine justification, an enciphered cord after 
verification, etc. further. In the case of which [ the ], information on a cord of an engine by the 
side of a server is stored at a client side. 

[001 7]A MOBA yl code system transmits an execution code and bringing data which should be 
protected from unjust read-out and rewriting to a computer by which the server to be used is 
operating. Therefore, reservation of security of a MOBA yl cord must be performed in an engine 
with which a MOBA yl cord is performed. However, generally there is no server side engine 4 
under management of the client side system 3. Therefore, in this invention, unjust read-out and 
rewriting as the server side engine 4 using what is made impossible from a client side. By making 
it verifiable whether an engine by the side of a server is just, security of a MOBA yl cord sent 
out from a client side is secured. 

[0018]The server side engine 4 has in an inside the access management device 6 which performs 
an access control of the resources 5, such as a memory used while each agent performs, so that 
other agents cannot access a field which each agent has not permitted clearly. And a server 
which provides service implements service as one of the agents. If it does so, it will become 
impossible from each service of a server to write other than data which a MOBA yl cord 
specified clearly. 

[0019]On the server side engine 4, the verification vicarious execution agent 9 who executes 
verification of the justification of the engine 4 by proxy is operating. The verification vicarious 
execution agent 9 via the interface part 10 in the engine 4 according to a request message of a 
verification agent of a client side, An integral value for which it depended on an engine cord by 
the engine cord read section 1 1 and the one-way function calculation part 13 besides an engine 
is acquired, and the integral value is returned to a verification agent of a client. Here, a one-way 
function is also called a secure hash function and a Messge Digest function, and, specifically, are 
MD4, MD5, SHA, checksum CRC, etc. A one-way function has the following character. 
[0020] 1. considering arbitrary sequences of bytes as an input — a fixed-length integral value — 
output 2., if it rewrites a difficult engine cord for unjust processing realization that discovery of 
an input which gives the same output defines the difficulty 3. inverse function, Since an integral 
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rewriting is detectable. Although it is possible to become the value same by chance naturally, if a 
size of an integral value becomes enough, it will be stored in probability which is satisfactory 
practically. Since discovery of an input which gives the same output is difficult, it is difficult to 
perform additional rewriting for consistency doubling for escaping detection of rewriting to a 
rewritten engine cord. Here, what the server side provides a client side with is only an infinite 
meaningless integral value as it is, in view of a viewpoint of security by the side of a server. The 
integral value has a meaning only after a client side knows the contents of the engine cord. That 
is, for the server side, it is offer of the minimum information, and it will be said that verification is 
possible. 

[0021]A verification agent of a client side investigates whether an integral value corresponding 
to the engine cord is a right value, and verifies that an engine by the side of a server is not 
rewritten, i.e., it is a just engine. 

[0022]Security is secured by sending a MOBA yl cord for the first time on an engine of a client 
side, when the agent who verifies the justification of the server side engine 4 is operating, and it 
is able to verify. 

[0023]When a cord of an agent who verifies the justification of the server side engine 4 is in the 
MOBA yl cord itself, an original execution code and bringing data are enciphered and it is 
considered as bringing data. This encryption enables it to decrypt an integral value when a just 
engine cord is inputted into a one-way function as a key. First, when a MOBA yl cord reaches 
the server side engine 4, it receives an integral value when an engine by the side of a server is 
inputted into a one-way function by performing the verification vicarious execution agent 9 and 
message switching by the side of a server. Security is secured in decrypting an original 
execution code and bringing data which have been enciphered by using the integral value as a 
key, and operating an original agent on the server side engine 4. 

[0024]Next, in composition of drawing 1 , an example explains the technique of engine justification 
verification processing performed using a read-out pattern and a one-way function by drawing 2 
thru/or drawing 5 . (A) of drawing 2 shows an example of an engine code expressed with two or 
more bytes. (B) of drawing 2 shows an example of a read-out pattern given to such an engine 
code. A read-out pattern has the number of bits corresponding to a number of bytes of an 
engine code, and the sequential bit position is matched with sequential byte data of an engine 
code. Therefore, when an engine code is stored in a memory of byte composition, each bit of a 
read-out pattern will correspond to a sequential address of a memory. 

[0025]A read-out pattern is generated, for example based on a random number. As shown in (B) 
of drawing 2 , a read-out pattern reads only byte data of an address corresponding to a bit 
position with a value "1" from a memory, and extracts a small number of data depending on a 
read-out pattern from an engine code. 

[0026] Drawing 3 shows a function of a one-way function. Data which read by drawing 2 and was 
read with a pattern is inputted into a one-way function, and is changed into a fixed-length output 
integer of a value depending on input data. 

[0027]As shown in drawing 4 , an engine code of server side engine which is going to verify 
justification is held also at a client side. In a client side, a read-out pattern is generated, data is 
extracted from an engine code which self holds, it inputs into a one-way function, and a client 
side output integer is created. On the other hand, data is made to extract also from an engine 
code executed by the server side using the same read-out pattern, and the server side output 
integer is made to create by a one-way function. Thus, an acquired client side output integer is 
compared with the server side output integer, and when coincidence is obtained like a graphic 
display, it judges with server side engine being just. 

[0028]On the other hand, as shown in drawing 5 , when a part of server-side-engine code is 
rewritten for the purpose of unjust processing, etc. Even if it performs the same processing as 
dra wing 4, it becomes inharmonious [ a client side output integer acquired and the server side 
output integer ], and is judged with a server-side-engine code being inaccurate. 
[0029] 

[Embodiment of the Invention] Drawing 6 is an explanatory view showing the multi agent system 
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code transmitted from the engine of a certain computer like a graphic display moves between 
the engines of the computer currently distributed on the Internet, and it processes required data, 
carrying out a sequential server agent and message switching. 

[0030] Drawing 7 is an explanatory view showing the example of composition of the system by 
which the verification agent operates with the engine of a client side. In drawing 7 . the same 
reference number has shown the component in the system shown in drawing 1 , and the common 
element. The elements newly shown in drawing 7 are 14 thru/or 16, and the verification agent to 
whom 14 operates with the engine of a client side system, and 15 operates on the engine 14, and 
1 6 are the MOBA yl codes transmitted from the engine 1 4. 

[0031]Only the data of the address which did not read all the engine codes, but is among an 
engine code, read, and was specified by the pattern comes to be read. Therefore, it becomes 
possible to raise the level of security as follows by specifying a read-out pattern as the 
verification demand from the verification agent 15 who is operating on the engine 14 of a client 
side arbitrarily. 

[0032]Since the server side needs to perform read-out of an engine code and calculation of a 
one-way function for every verification demand from a client side, it becomes impossible that is, 
to say that an inaccurate engine is used from the next using a just engine at first. If the same 
read-out pattern is not again used even if a third party intercepts the contents of the message 
switching for the engine verification between a client and a server, it is only a pair of a 
meaningless pattern and a number. Since it becomes unnecessary to read all the engine codes 
as a secondary effect, it becomes possible to lower the time cost for verification. 
[0033]There are two, the case where it verifies on the engine of a client side, and when 
verification is performed on the engine by the side of a server, in the method of using this read- 
out pattern, and even when it is which, validity does not change. 

[0034]The operation in the case of verifying drawing 7 on the engine of a client side is explained 
with reference to the flows of control of drawing 8 . In the system configuration of drawing 7 , the 
verification agent 1 5 who verifies the justification of the engine by the side of a server is 
operated on the engine 14 of a client side, and before transmitting a MOBA yl code towards the 
engine 4 with which the server to be used operates, the justification of the engine of the partner 
point is verified. First, an engine verification request message is transmitted to the verification 
vicarious execution agent 9 of the server side from the verification agent 15 of a client side (1). 
Here, when using a read-out pattern, the pattern also transmits. The verification vicarious 
execution agent 9 of the server side via the interface part 10 in the engine 4, The integral value 
for which it depended on the engine code by the engine code read section 1 1 and the one-way 
function calculation part 1 3 besides an engine was acquired, and the integral value is returned to 
the verification agent of the client side (2). Since the advantage of this system configuration 
does not need to transmit the MOBA yl code 16 until verification of the engine of the partner 
point finishes (3), it is being able to reduce unjust read-out by the transmission destination in 
the middle of transmitting, and the opportunity of rewriting. It becomes an advantage in 
verification agent creation that the resource used also has little restriction. 
[0035]Thus, the verification agent 15 who verifies the justification of the engine by the side of a 
server is operated on the engine 14 of a client side, When performing the verification vicarious 
execution agent 9 of the server side, and message switching for engine verification, it may be 
made to perform mutual attestation, the electronic signature of a message, and encryption to 
those message switching. While preventing a break through of unnecessary information by 
starting verification procedure after the verification vicarious execution agent of the server side 
checks the truth of the verification request message from a client side if it does so, The engine 
overloaded state by the side of a server when a fake verification request message is frequently 
sent out by bad faith is avoidable. It becomes possible to prevent disturbance of verification by a 
third party's imitation or altered message transmission by checking the truth of the message of 
the integral value for the verification from the server side of a client side. 

[0036]Next, the case where a verification agent is operated on the engine by the side of a server 
is described. Drawing 9 shows the example of the MOBA y! code which transmits from a client 
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consists of an execution code portion and a bringing code part. 

[0037]The code of the engine verification agent who performs verification of engine justification, 
decryption of the code after verification etc. which were enciphered, and execution of the code 
is stored in an execution code portion. The enciphered original execution code and its bringing 
data are stored in the bringing data part The encryption is given so that the integral value 
acquired by inputting an engine code into a one-way function can be decrypted as a key. If a 
MOBA yl code reaches the engine by the side of a server, an engine verification agent will be 
started. An engine verification agent transmits a verification request message to a verification 
vicarious execution agent first, as shown in the flows of control of drawing 10 . Here, when using 
a read-out pattern, the pattern also transmits. The verification vicarious execution agent 9 
acquires the integral value for which it depended on the engine code by the engine code read 
section besides an engine, and the one-way function calculation part via the interface part 10 in 
an engine, and returns the integral value to a verification agent. A verification agent performs 
decryption of an agent's execution code and bringing data which should be started on this engine 
in bringing data by using that integral value as a key, and starts on this engine. Since message 
switching for verification is locally performed on the engine by the side of a server, the 
advantage of this system configuration is that a possibility that unjust read-out and rewriting will 
be performed for a third party is low. 

[0038]By thus, the case where a verification agent is operated on the engine by the side of a 
server. As opposed to the engine with which the server to be used is operating from the client 
side, As bringing data of a MOBA yi code to transmit, encipher an original execution code and its 
data, have stored, and the integral value acquired by inputting into a one-way function the 
engine code which obtained them from the verification vicarious execution agent is used as a 
key, With the case of the system decrypted and performed, it adds for every server at the time 
of encryption of a peculiar key. In newly using as bringing data the data obtained from the server 
by the case where a public key is used for encryption, it performs encryption using the public 
key encryption of the server which needs to use the data in the middle of a client as shown in 
drawing 1 1 . The advantage of this method is being able to reduce further the danger read-out 
and rewriting of an execution code and data being performed in addition to an intermediate 
predetermined server and the client itself, when using two or more servers, while a MOBA yl 
code moves. 

[0039]As shown in drawing 12 , it can have composition which adds the engine self-verification 
device 1 7 to the server side. In this case, the self-verification device 1 7 during starting of the 
engine of a server, and operation, Self-verification of rewriting of an engine code is performed by 
acquiring the integral value for which it depended on the engine code periodically by the engine 
code read section 1 1 and the one-way function calculation part 1 3 besides an engine, and 
comparing with a right value, the advantage of this method being performing self-verification by 
the server side, being preventing unjust read-out and rewriting of the MOBA yl code of a client 
side, and maintaining reliance of a server — ****** — they are things. 
[0040] 

[Effect of the Invention]Being indicated by the server among the data (an execution code is 
included) Which a MOBA yl code has, when a MOBA yl code is executed according to this 
invention, The MOBA yl code execution engine itself used [ that it is only the portion specified 
by the explicit description in a MOBA yl code and ] for the server can guarantee, and the check 
of the guarantee can be carried out by a client side. Therefore, the server of a calling destination 
is received on the occasion of dispatch of a MOBA yl code, Since it becomes possible to 
disclose only the required information in a MOBA yl code to a partner server about the operation 
in the server, Like a series of data processing operation which consists of the information 
gathering and plural steps involving two or more servers on the Internet, Although a part of 
information in a MOBA yl code may be disclosed to each server, when you do not want to 
indicate all, or when the information which a MOBA yl code acquires from each server, and builds 
in needs to be made secret at other servers, it becomes possible to use a MOBA yl code safely. 
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[Brief Description of the Drawings] 

[Drawing 1] It is a theoretic lineblock diagram of this invention. 

[Drawi ng 2]It is an explanatory view of the verification processing (the 1) of the justification of 
the engine by this invention. 

[Drawing 3] It is an explanatory view of the verification processing (the 2) of the justification of 
the engine by this invention. 

[Drawing 4] It is an explanatory view of the verification processing (the 3) of the justification of 
the engine by this invention. 

[Drawing 5j lt is an explanatory view of the verification processing (the 4) of the justification of 
the engine by this invention. 

[Drawing 6]I t is an explanatory view showing the multi agent system on the Internet, and 
execution of a MOBA yl code. 

[Drawing 7] It is an explanatory view showing the example of composition of the system by which 
the verification agent operates with the engine of a client side. 

[Drawing 8jT hey are flows of control of a system which operate a verification agent on the 
engine of a client side. 

[Drawing 9] It is an explanatory view of the MOBA yl code of the system which operates a 
verification agent on the engine by the side of a server. 

[Drawing 10] It is a figure showing the flows of control of a system which operate a verification 
engine on the engine by the side of a server. 

[Drawing 1 1] It is an explanatory view showing the example of composition of a MOBA yl code. 
[Drawing 12] It is an explanatory view showing the example of composition which added the self- 
verification device in an engine. 
[Description of Notations] 

1 : Unjust read-out and an engine with a rewriting prohibition function 
2: A vicarious execution device of verification of engine justification 
3: Client side system 
4: Server side engine 
5: Resource 

6: Access management device 
7: Server agent 
8: Agent 

9: Verification vicarious execution agent 

1 0: Interface part 

11: Engine code read section 

1 2: Read-out pattern storage 

1 3: One-way function calculation part 
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[Drawing 3] 
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[Drawing 11] 
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